Does 'risk management' or 'knowledge transfer' best describe your security awareness program? At the end of the day, it's more than just what people know, it's what they do that matters. Alexandra Panaretos, CSAP, SSAP joins us to share her years of experience leading human-based cyber risk and education for enterprise organizations to help us understand better what managing risk looks like and how it supports security awareness with practical hands-on applications.



Alexandra has worked in the human cyber risk space for the last 13 years and has successfully implemented executive personal security, operational security planning, insider threat and incident response programs, and security awareness, communication, and education strategies for Fortune 50/100 companies and other global enterprises. She holds an OPSEC Manager II certification from the U.S. Army and the Joint Information Operations Warfare Center (JIOWC).



Main Talking Points:

Security Awareness Programs vs Managing Human Risk
What Does Managing Human Risk Look Like?
How To Start Managing Risk?
How Can We Measure Our Success in Managing Risk?
Security Culture = Permission to Ask
How To Talk With The Board/Leadership About Human Risk


Connect with Alexandra and learn more from her professional insights here: https://www.wizer-training.com/community-alexandra-panaretos

Alex's SANS Talk 2022 - https://www.youtube.com/watch?v=VusLB1hba3A



Related Resources on Risk Management

What is Risk Management: Back to the Basics

Security Awareness Done Right

Security Awareness Training Highlights PDF



Connect with the Wizer Team

Gabriel Friedlander - ⁠https://www.linkedin.com/in/gabrielfriedlander/⁠

Ayelet HaShachar Penrod - ⁠https://www.linkedin.com/in/ayelet-penrod/⁠

The Game Of Risk  Can You Win At Managing Risk | Convo with Alexandra Panaretos

[VandyCAST #0001] Canais Sendo Hackeados!

In this insightful video, we had the privilege of hosting Josh Brodbent, the Regional Vice President of Solutions Engineering at BeyondTrust. Together, we explored the crucial concept of Authority to Operate (ATO) in the dynamic realm of information security.

Join us as Josh delves deep into the world of cybersecurity, emphasizing the paramount importance of robust identity security, network security, application security, and impeccable data handling within a network. He sheds light on the evolving landscape of security practices and highlights the necessity for businesses to develop a resilient cybersecurity posture.

He shares his extensive knowledge on how businesses can adhere to changing regulatory measures, ensuring they stay ahead in the race against cyber threats. He underlines the significance of "authority to operate" for Independent Software Vendors (ISVs) in sectors as critical as healthcare and BFSI.

Whether you are an industry aficionado, a tech connoisseur, or simply inquisitive about the profound forces shaping our digital future, this podcast episode is an imperative listen. Be prepared to acquire invaluable insights, expand your knowledge, and embark on an odyssey into the frontiers of emerging technology with Ganeshram Ramamurthy as your guide.

Discover the secrets to implementing and evolving security practices in networks, and learn about the vital role effective management of the ATO process plays in safeguarding digital infrastructures.

Listen now and stay at the forefront of the tech realm! Remember to like, share, and subscribe for more enlightening and thought-provoking conversations.

InfoSecCast is proudly powered by Relevantz, a leading provider of custom software engineering services with a global team of over 1200 engineers. Discover more about us at www.relevantz.com.

Join the InfoSecCast community:
Website: www.InfoSecCast.com

#podcast   #InfoSecCast #beyondtrust #ATOMasters #SecureTheDigital #CyberGuardians #ATORevolution #InfoSecFrontiers #DigitalFortresses #CyberResilienceNow #ATOSecretsUnveiled #SecureHorizons #ATOdecoded #cybersecurity #cybersecurityawareness

InfoSecCast Episode 2 : ATO's Vital Role in Cyber Security Resilience with Josh Brodbent

HEAL Security Dispatch, hosted by Richard Simmons, delivers the latest updates in the realm of cybersecurity. From discussing a class action lawsuit against Norton Healthcare for negligence, to talking about the discovery of a new malware strain, NKAbuse, this podcast covers all the top stories of the day. It also delves into the apprehension of a Vietnamese criminal group by Microsoft, shares insightful conversations from HIMSSCast, and talks about the transformative potential of AI in healthcare. Join us at HEAL Security Dispatch for an in-depth analysis of cybersecurity issues and updates.

Ransomware Hits Norton Healthcare: NKAbuse, and Rhadamanthys Threats Uncovered

Ransomware as a Service (RaaS) represents a menacing evolution in cybercrime tactics, enabling even those without technical expertise to execute ransomware attacks. This model operates like a subscription service, allowing individuals to access ransomware tools and infrastructure in exchange for a fee or a share of the ransom proceeds. Essentially, it democratizes cyber extortion, empowering a wider range of actors, including less skilled hackers, to launch sophisticated attacks. RaaS provides a ready-made platform, complete with ransomware codes, distribution mechanisms, and sometimes even customer support.

Understanding Ransomware As A Service (RaaS)

الحلقة الأولى من بودكاست أمور طبيعية حول تطبيقات المواعدة
شنوة اللي يخلي الشباب يختارها هي؟
كيفاش يتعامل معاها؟
مع أمينة جبلون وضيفات الحلقة،الأستاذة المساعدة في علم النفس ندى نجار، ومدربة السلامة المعلوماتية ليلى منكبي
مكنكم التواصل معنا والتفاعل مع مواضيع حلقاتنا من خلال مجموعة الفايسبوك أمور طبيعية عبر الرابط: www.facebook.com/groups/1100792761074138

الحلقة الأولى: الشباب وتطبيقات المواعدة

Beware of Okta Phishing Attack Linked to CryptoChameleon! Stay vigilant against fraudulent attempts to steal your sensitive information. Learn how to protect yourself from potential cyber threats and keep your data secure.

Okta Phishing Attack Facilitated By CryptoChameleon!

During the sacred month of Ramadan, a concerning surge in cybercrimes is observed worldwide. This period, marked by fasting, prayer, and reflection for Muslims, unfortunately, witnesses an uptick in various forms of online frauds, scams, and cyberattacks. Understanding the reasons behind this trend and recognizing the methods used by cybercriminals can help individuals and organizations protect themselves more effectively.

Cyber Crimes Intensify In The Holy Month Of Ramadan: Know The Whys and Hows!

Tune in to the HEAL Security Dispatch Daily Digest, your trusted source for the latest in cybersecurity news and expert commentary. Join host Richard Simmons as he navigates the complex landscape of healthcare and cybersecurity, shedding light on critical security advisories from Cisco, the recent Reddit outage, and a staggering ransom payment by UnitedHealth Group following a cybersecurity breach. The podcast also explores a significant crackdown on cybercrime by Trend Micro and Interpol, continued threats from the PlugX worm, strategies to enhance cyber resilience in healthcare, and the latest developments in cryptocurrency laundering, AI-driven threat detection, and nation-state cyberattacks. Stay updated, and stay secure with the HEAL Security Dispatch Daily Digest. 
https://healsecurity.com/

Cybersecurity Across The Globe: Cisco Vulnerabilities, Reddit's Outage, and UnitedHealth

Delve into the latest cybersecurity developments in healthcare and technology with HEAL Security Dispatch Daily Digest, your trusted source for daily updates on the ever-evolving landscape of digital security. Hosted by the knowledgeable Richard Simmons, this podcast brings you in-depth analyses of major breaches and innovations reshaping the industry. From the recent exploits in Cinterion cellular modems to the aggressive tactics of ransomware groups like Black Basta, no stone is left unturned in our exploration of cybersecurity threats facing healthcare, automotive, energy, and beyond. Tune in to discover how industry leaders like Thales and ZScaler are responding to vulnerabilities, and staying ahead of the curve with insights into cutting-edge technologies like AI-driven cancer detection showcased in studies like Mainz Biomed's eAArly DETECT. With a focus on actionable strategies and collaborative initiatives, CyberMed Insights equips you with the knowledge and tools needed to safeguard your organization's digital assets and protect patient data. Join us on this journey to fortify healthcare cybersecurity and ensure a safer, more resilient future for all. 
healsecurity.com/

Cybersecurity Updates: Unveiling Cyber Threats, Proactive Defense, and Medical Breakthroughs

In the latest episode of HEAL Security Dispatch Daily Digest, host Richard Simmons delves into the pressing matters at the intersection of healthcare and cybersecurity. The episode kicks off with news of a significant data breach at FlightAware, where users' passwords and Social Security numbers were left exposed for years, highlighting the enduring challenge of securing personal information online. It also covers QNAP's proactive steps against rising ransomware threats through its updated QTS operating system, showcasing the industry's evolving defense mechanisms against cyberattacks. The discovery of the MoonPeak remote access trojan by the North Korea-linked APT group Kimsuky, as reported by Cisco Talos, illustrates the sophisticated nature of cyber espionage and its implications for international security, especially concerning nuclear discussions between China and North Korea.

The podcast further explores advancements in securing AI-powered healthcare infrastructure by Avant Technologies, emphasizing the significance of collaborative efforts in enhancing data security in response to President Joe Biden's executive order. Lancaster University's Cyber Threat Lab's role in pioneering cybercrime research and education underscores the importance of innovation and collaboration in the fight against hackers. Additionally, the episode sheds light on a large-scale extortion campaign affecting AWS-hosted domains, a critical vulnerability in the Litespeed Cache plugin for WordPress sites, and a severe authentication flaw in GitHub Enterprise Server, encapsulating a wide array of cybersecurity challenges and responses across various platforms and industries. Each segment of the episode underscores the dynamic and critical nature of cybersecurity in protecting digital and physical realms alike, offering listeners expert insights into the ongoing battle against cyber threats. 
https://healsecurity.com/

Cybersecurity Today: Breaches, Ransomware Defense, and AI Innovations on the Frontline

HEAL Security Dispatch Daily Digest, hosted by Richard Simmons from London, delves into the complex world of cybersecurity with a focus on healthcare and digital safety. In today's episode, the uncovering of 'sedexp,' a Linux malware undetected for two years, raises serious questions about the evolving threat landscape. Attention is also drawn to Pavel Durov's arrest in France amid concerns over Telegram's content moderation practices, a topic igniting widespread debate over digital freedom versus regulation. The program highlights a governmental watchdog's report criticizing the FBI's handling of data security, alongside CISA's proactive measures against known cybersecurity vulnerabilities by updating its catalog. Additionally, SonicWall's release of a patch for a critical firmware vulnerability showcases the ongoing battle against potential unauthorized access and system failures. The disruption of London's healthcare services due to a cyberattack on Synnovis underscores the tangible impact of cyber threats on public health infrastructure. A separate incident affecting Seattle's airport travel and Microsoft's mishap with Exchange Online further illustrate the pervasive challenges facing cybersecurity professionals today. This episode, marked by a rich diversity of topics, underscores the global and multifaceted nature of cybersecurity concerns in our increasingly digital world. 
https://healsecurity.com/

Cybersecurity Challenges Surge: From Linux Malware to Telegram's CEO Arrest and NHS Cyber Attack

Join host LaVonda Renfro in the latest episode of Truth in Texas Banking, where we dive into the crucial world of financial security. This week, LaVonda sits down with Bob Ludeke, the Chief Information Security Officer at Veritex Community Bank. Together, they uncover the latest trends in banking fraud, sharing common tricks that fraudsters use and essential tips on how to protect yourself.

Bob brings a wealth of knowledge, offering practical advice on what to do if you suspect you've been compromised. This episode is packed with insights you won’t want to miss. Tune in and empower yourself with the knowledge to navigate the complexities of banking security in today’s digital age!

Truth in Texas Banking Cyber Security Awareness with guest Bob Ludecke

The HEAL Security Dispatch Daily Digest is your trusted source for up-to-date cybersecurity news, with a special focus on healthcare and technology. Hosted by Richard Simmons from London, the show provides expert insights into pressing security issues. In this episode for Thursday, November 7th, 2024, we dive into critical developments: Microsoft’s plan to integrate an AI-powered rewriting tool into Windows 11’s Notepad, enhancing user productivity and text refinement. We also cover CISA’s urgent alert about a high-risk vulnerability in Palo Alto Networks software that could allow remote code execution, stressing the need for immediate patching.

Also on today’s docket is Nokia’s response to a third-party application breach, with leaked source code raising supply chain security alarms. The episode highlights a significant global law enforcement effort to dismantle a cybercrime network, resulting in the takedown of 22,000 IP addresses linked to malicious activity. Additionally, we explore North Korean hackers’ latest campaign targeting macOS users with malicious cryptocurrency PDFs, and the Canadian government’s decision to ban TikTok, citing national security risks. Lastly, we discuss the OpenNotes Lab’s partnership with Abridge to explore genAI’s role in creating patient visit summaries, advancing transparency and health equity in healthcare. Stay updated on these stories and more at healsecurity.com.

HEAL Security Dispatch: AI-Powered Tools in Windows, and MacOS Crypto Attacks

Risk Beats is a high-energy rap that dives deep into the world of Cyber Risk Quantification, breaking down complex concepts into catchy verses. 

This track covers everything from the basics of risk metrics to a bold diss against traditional models like FAIR, all while showcasing the power of QBER (Quantified Business Exposure to Risk). 

With precision, clarity, and real data-driven insights, "Risk Beats" is the anthem for cybersecurity professionals who know that protecting their business means no more guessing—just quantifying risk with facts. 

Tune in for a mix of knowledge, rhythm, and swagger!


Lyrics:

Yo, check it, it's all about quantifying risk, Let’s break it down, so you get the gist. Numbers over guesses, precision’s the key, Cyber risk quantified, let's make it clear, you'll see.

(Verse 1) Yo, you know the drill, risk is real, Cyber threats coming, let’s make them feel, Risk quantification’s the new frontier, No more guessing, let's make it clear.
We got the metrics, let the numbers speak, Exposure and likelihood, let’s take a peek. FAIR model, QBER's in play, Let’s break it down in a clear-cut way.

Cyber risk quantification, we keep it tight, Measure the threat and make the metrics bright. From exposure to impact, we make it clear, Cyber risk quantified, no more fear.

(Verse 2) Risk register’s alive, it’s a dynamic thing, It adapts to the threat, like a bird with wings. Mitigate the risk, don’t just guess, Value the impact, and clean up the mess.
Use data and insight, make those connections, Link it to your business, draw the reflections. Risk appetite? Yeah, we align, With quantified numbers, we're gonna shine.
Let’s talk monetary, we bring the math, Convert the threats into what they cost, on the path. Cyber value at risk, how much do you pay? For breaches and downtime, every single day.

Cyber risk quantification, we keep it tight, Measure the threat and make the metrics bright. From exposure to impact, we make it clear, Cyber risk quantified, no more fear.

(Verse 3) Now let’s talk FAIR, it’s time to diss, It’s based on assumptions, can’t trust that bliss. Risk appetite’s vague, and data’s unclear, It’s all theoretical, let’s shift the gear.
FAIR’s got the framework, but lacks precision, It’s all based on guesswork, no clear decision. When it comes to risk, we need that clarity, QBER’s the answer, bringing real parity.
With QBER, we quantify with no shame, It’s all about data, no guessing the game. We map the threats, we calculate true, No fuzzy logic, just the facts, it’s true.

FAIR's got complexity, it’s built on assumptions, Doesn’t show you the dollars or the real repercussions. QBER’s the upgrade, precise and clean, Risk quantification done right, you know what I mean.
FAIR might give you a model, but lacks that depth, QBER's in the game with the business prep. No guesswork here, just metrics that fit, QBER’s the king, and FAIR doesn’t quit.

Analyze, visualize, turn numbers into force, Cyber risk quantified, a powerful course. From frameworks to scans, we keep it in sight, Data-driven decisions, we take the flight.

Cyber risk quantification, we keep it tight, Measure the threat and make the metrics bright. From exposure to impact, we make it clear, Cyber risk quantified, no more fear.

So now you know, it’s not just a trend, Risk quantification’s how we transcend. No more guesswork, just facts we bring, Cyber risk quantified, let the numbers sing.

Drop the mic on risk with precision!

Risk Beats

The HEAL Security Dispatch Daily Digest, hosted by Richard Simmons from London, delivers a comprehensive overview of the latest cybersecurity developments with a sharp focus on the healthcare sector. Each episode highlights pressing cyber threats, expert research, global breaches, and technological innovations shaping the cybersecurity landscape. This edition features stories ranging from a sophisticated ransomware attack using a counterfeit KeePass application to a major outage at Kettering Health suspected to be the work of the Interlock ransomware gang. It also examines a groundbreaking risk assessment metric proposed by NIST and CISA, significant data breaches affecting organizations like SK Telecom and Nationwide Recovery Services, and the rapid growth of the global healthcare cybersecurity market. With insights into emerging malware trends and the role of AI, blockchain, and machine learning in boosting cyber resilience, the podcast serves as a vital tool for professionals navigating the complex intersection of healthcare and information security. 
https://healsecurity.com/

Cybersecurity Highlights: VMware Ransomware via Fake KeePass, and Kettering Health Attack

In today’s deep dive, we unpack a wave of major healthcare data breaches reported to federal authorities, impacting millions. We explore the release of a free decryptor for Phobos ransomware, a significant breakthrough for victims. Hospitals and public services in Kansas, Nova Scotia, and Glasgow are reeling from recent cyber incidents. Plus, we look at critical vulnerabilities affecting VMware and Citrix systems used across the healthcare sector. Stay ahead with the latest threats and defense updates in healthcare cybersecurity.

Hospital Hacks, Ransomware Relief, and Rising Threats in Healthcare Cybersecurity

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Advanced Phishing Protection and Anti-Phishing Solution for Your Small Business. Get total phishing protection against spear phishing, ransomware, CEO fraud, impersonation, and other sophisticated email attacks with advanced threat defense – that also integrates seamlessly with Office 365 and most on-premise or cloud hosted email solutions.

**Truth in Texas Banking** – Hosted by LaVonda Renfro, COO of Veritex Community Bank, and co-host Beth Stavinoha. We interview people with a purpose, diving into leadership, careers, and the passion behind building stronger communities. Member FDIC.

New tracks tagged #CybersecurityAwareness